News Header

How Should GMP and Quality Responsibility Be Split in an Australian Sea Buckthorn Seed Oil OEM/ODM Soft Capsule Project?

Do not settle the question with "whoever manufactures is responsible". Cut it into a matrix: raw material specification and COA sit with the oil supplier, process validation and batch records sit with the contract manufacturer, finished-product release and the AUST L listing sit with the brand owner—then lock change control, deviation notification, recall cooperation, product liability insurance and audit rights into a quality agreement. Miss any one cell and a pharmacy or retailer audit will stop your listing.

In Australian supplement contract manufacturing, a GMP certificate or a manufacturer's statement is a hard gate. Without one, contract customers simply do not accept the input, and no amount of good pricing changes that.

What a decision maker actually has to manage is not the certificate itself but the responsibility gaps—the items that the oil supplier, the contract manufacturer and the brand owner each assume belong to somebody else. This article gives you the matrix, the quality agreement list, the audit alternatives and the exception path.

What Does GMP Responsibility Actually Cover in an OEM/ODM Soft Capsule Project?

GMP in this context spans six linked activities, and each one has a different owner.

ActivityWhat it coversTypical owner
MaterialsInput specification, COA, traceability to originOil supplier
Process validationEncapsulation parameters, fill weight controlContract manufacturer
Production and batch recordsBatch manufacturing record, deviationsContract manufacturer
TestingIn-process and finished-product testingContract manufacturer / brand QA
ReleaseAuthority to release or reject a batchBrand owner (named role)
Complaints and recallComplaint handling, recall executionBrand owner, supported by supplier
The most common misunderstanding is treating one GMP certificate as cover for all six. A supplier's GMP evidence says something about how the oil was made; it says nothing about how your contract manufacturer validated the encapsulation run, and nothing about who has the authority to release a finished batch.

For a decision maker the KPI behind all this is blunt: zero recalls, and 100% certification coverage across the inputs that need it.

Who Owns Which Document in the Chain?

Write the deliverables down, because audits are document exercises.

DocumentOwnerWhat "good" looks like
Raw material COAOil supplierBatch-specific, full panel, method stated
Fatty acid profileOil supplierBatch measured, components listed
Stability dataOil supplier / sharedSupports 24–36 months
Origin traceabilityOil supplierBatch to growing base
Process validationContract manufacturerFill weight, seal integrity, parameters
Batch manufacturing recordContract manufacturerComplete, retrievable by batch number
Finished-product testingContract manufacturer / brand QAAgreed panel, results on file
Release decisionBrand ownerNamed role, written
Label complianceBrand ownerACCC-consistent English labelling
AUST L listingBrand owner via Australian sponsorSubmitted, evidence on file
Retain samplesBoth oil supplier and brand24 months, batch linked

The three gaps that break audits

Missing stability data. Shelf life of 24–36 months is a claim you have to support. If nobody owns the stability file, it does not exist at the moment it is requested.

Batch records not shared. When the brand cannot retrieve the manufacturing record for a specific batch number, a complaint investigation stalls at the first step.

Unclear retain ownership. If both sides assume the other kept the retain, there is no sample to retest and no chain of custody.

Why Does This Split Decide Whether You Get Listed?

Listing decisions are evidence decisions. Buyers at pharmacy and retail level ask for a small, predictable set of documents, and a missing item delays the range review rather than triggering a negotiation.

What reviewers look forEvidenceIf missing
GMP status of inputsGMP certificate or manufacturer's statementInput rejected
Product liability coverCertificate, commonly $5Mn+Range review fails
Recall readinessWritten recall procedureListing delayed
Shelf-life supportStability data for 24–36 monthsExpiry shortened or listing refused
TraceabilityBatch-to-origin recordAudit finding
In the mainstream 500 mg × 60 count soft capsule configuration, these checks are routine rather than exceptional. The commercial consequence of failing them is not a fine—it is a quarter of delay, reprinted artwork, and a project ROI that quietly drops below your 30% gross margin gate.

How Do You Write the Responsibility Matrix Into the Contract?

The contract should name owners, not describe intentions.

ClauseSuggested contentWhy it matters
Specification ownershipThe agreed spec block is an annexPrevents spec drift
Change controlSupplier must notify before any process or origin changeSilent changes break validation
Deviation notificationWritten notice within an agreed windowEnables quarantine before use
Release authorityNamed role on the brand sideRemoves ambiguity in a crisis
Recall cooperationDefined responsibilities and timelinesRecall plans fail without suppliers
Liability insuranceCertificate at $5Mn+ provided and renewedHard requirement for retail
Retain obligation24 months, both sides, batch linkedCreates evidence
Audit rightsRight to audit or to appoint a third partyKeeps verification possible
Remedy capAgreed liability cap and credit mechanismPredictable outcomes
Use English, attach the specification as an annex, and enforce one batch numbering convention across contract, COA, batch record and retain register. In practice, disputes about quality are usually disputes about identification.

What Does the Quality Agreement Need to Cover Beyond GMP?

A quality agreement is where the day-to-day relationship is actually governed, and it is easier to enforce than a purchase contract because it is operational.

ItemWhat to specify
Change controlWhat counts as a change, notice period, revalidation trigger
Deviation managementClassification, notification window, disposition
Complaint handlingResponse target (commonly within 24 hours), investigation depth
Annual reviewPeriodic review of batches, deviations and trends
Data integrityWho holds records, retention period, access on request
SubcontractingWhether subcontracting is allowed and with notice
Termination and materialWhat happens to stock, retains and documents on exit
Treat the quality agreement as a living document. Every deviation that was handled badly should produce a clause that handles it well next time.

How Do You Verify Compliance Without Flying to China?

Travel is expensive and slow, so most buyers use a layered approach.

MethodCostEvidence strengthBest used for
Document auditLowMediumRoutine annual review
Third-party audit reportMediumMedium–highNew supplier qualification
Live video walkthroughLowMediumChange verification, seasonal checks
Batch record sharingLowHigh (for the batch)Every shipment
On-site audit in ChinaHighHighestStrategic or high-volume suppliers
A supplier's willingness to be audited is itself a scoring input. Refusal is rarely about confidentiality; it is usually about what the audit would find.

Close every audit with a written finding list, an owner and a due date, then verify closure at the next review. An audit without closure is a photography exercise.

What Happens When Something Goes Wrong?

Exceptions follow a predictable path, and the path works only if the artefacts exist.

StageEvidenceDecisionOutcome
SignalComplaint, test result, market feedbackQuarantine affected batchesScope contained
InvestigationRetain sample, batch record, deviation logRoot cause identifiedResponsibility assigned
DeterminationContract clause and quality agreementSupplier / manufacturer / brandLiability agreed
ActionRecall procedure, if requiredExecute with supplier supportProduct removed if needed
RecoveryInsurance certificate, $5Mn+Claim filedCost shared per agreement
ReviewQuarterly business reviewClause updatedRecurrence prevented
Two precautions make this survivable: hold insurance certificates on file before you need them, and rehearse the recall procedure once. A plan that has never been walked through is not a plan.

FAQ

Is the supplier's GMP certificate enough? No. It covers the oil. You still need the contract manufacturer's process validation and batch records, and your own named release authority for the finished product.

Can a manufacturer's statement replace a GMP certificate? It depends on the reviewing party. Some accept a statement where a full certificate is not available for the input, but you should confirm with your sponsor and the listing reviewer before relying on it.

Who owns the AUST L listing, the brand or the supplier? The brand owner, submitted through an Australian sponsor. The supplier supports it with specification, stability and manufacturing documentation, but the listing sits with the brand.

How much product liability insurance is enough? Certificates at $5Mn+ are commonly requested at retail level. Confirm the requirement with your specific channel, and keep the certificate current rather than filing it once.

Who owns an ODM formulation, and can I take it elsewhere? Only if the contract says so. Decide ownership at the start: if you need portability, negotiate it before development rather than after a disagreement.

Can the brand audit the site in China? Yes, and a credible supplier will agree to it. If travel is not practical, agree on third-party audit reports plus live walkthroughs and full batch record access.

Who can release a deviated batch? Only the role you named in the contract. Anyone else releasing a deviated batch creates unmanaged liability for the brand.

How are recall costs shared? As agreed in the contract and quality agreement, usually tied to where the root cause sits, with the insurance claim as the backstop. Agree this before the first shipment, not during the incident.

Conclusion and Next Steps

Responsibility splits fail in the gaps, not in the certificates. A matrix, a quality agreement and an audit routine convert "I assumed they handled it" into a named owner with a document, and that is exactly what a listing reviewer is looking for.

Four steps to get there:

  1. Draw the responsibility matrix for your own project and fill in every deliverable cell.
  2. Sign a quality agreement covering change control, deviations, complaints within 24 hours and recall cooperation.
  3. Agree the audit method—documents, third-party report, live walkthrough or on-site—and set closure deadlines.
  4. Verify the $5Mn+ insurance certificate and the 24-month retain arrangement before the first production run.

Tell us your format, volume band and channel requirements, and we will return a responsibility matrix, a GMP and documentation pack, and a quality agreement template your QA and legal reviewers can work from directly.

This article was published on 2026-09-08, and last updated on 2026-09-09. The article will be continuously updated.